Bastazo

Bastazo provides cybersecurity solutions for operational technology (OT) environments, focusing on critical infrastructure sectors including power, water, and manufacturing. The company was founded in 2020 by Phillip Huff and three University of Arkansas faculty members, based on licensed technology developed at the U.S. Department of Energy's Secure, Evolvable Energy Delivery Systems (SEEDS) cybersecurity center. The company launched its first commercial product in 2023 and raised venture capital in 2025. The platform integrates vulnerability management capabilities using Stakeholder-Specific Vulnerability Categorization (SSVC) and the Common Security Advisory Framework (CSAF) to help organizations prioritize vulnerabilities based on actual risk impact rather than traditional CVSS scores alone. The company's approach enables OT operators to make risk-informed remediation decisions that account for the unique constraints of industrial environments, where patching can cause operational disruptions. Bastazo's technology includes V-INT, a CESER-funded project developed in collaboration with Network Perception and the University of Arkansas, which provides attacker-aware simulations and vulnerability intelligence for energy utilities. The platform helps organizations address challenges common in OT cybersecurity, including asset visibility, alert fatigue, and the difficulty of applying patches in production environments. The company also offers Rapid Recover solutions in partnership with Salvador Tech for incident response capabilities.